$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: HpOTSJe0bK84PAKSaun35OlZ1C+0qdhlAvjGiA3dkZA= Subject key identifier: 75:9B:21:8E:90:23:92:01:6B:CB:05:12:36:01:07:1E:C8:DE:D5:88 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 74222486C65CB19771BC323FDED1DBF5DDA2B18E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: 0F Signing time: Fri 29 May 2026 03:57:31 +0000 Manifest this update: Fri 29 May 2026 03:52:31 +0000 Manifest next update: Sat 30 May 2026 05:18:31 +0000 Files and hashes: 1: 3231302e322e342e302f32342d3234203d3e203234313531.roa (hash: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c=) 2: 323030313a6463373a623a3a2f34382d3438203d3e203234313531.roa (hash: nCmmLKf7p/+gDBZjpiG7vY0+piKta/7HzgAV8Daoohw=) 3: 3231302e322e342e302f32342d3234203d3e203234343039.roa (hash: dsVTcMJyEhqmVODGZAIkGc623cScIW3ZMfG651m2w+c=) 4: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (hash: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs=) 5: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: QsnK0Ni62zW1orrIddHGlqfP/YD6jjQts5nj57CFELI=) 6: 312e322e342e302f32342d3234203d3e203234313531.roa (hash: TBnC2LzR+6Db4WOI7E+8pudN/0AB0HhXouySfw2xuiY=) 7: 312e322e342e302f32342d3234203d3e203234343039.roa (hash: nEQtgygHVMKG47GK6dkWFFlZukvt0PGUFnlFtUuFZLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:22:24:86:c6:5c:b1:97:71:bc:32:3f:de:d1:db:f5:dd:a2:b1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: May 29 03:52:31 2026 GMT Not After : May 30 05:18:31 2026 GMT Subject: CN=759B218E902392016BCB05123601071EC8DED588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:25:67:0f:44:83:61:3e:58:94:62:fc:57: 3a:8a:2c:d1:d8:57:db:76:cb:29:de:a4:1d:fa:83: 36:df:e7:15:fd:13:1b:0e:36:c7:be:0b:86:f7:89: 65:4d:81:20:82:81:52:0c:f4:87:6e:28:4b:61:b7: 2b:f3:5f:a5:29:99:fb:b3:68:f0:fd:ed:22:b7:4e: e2:b3:84:e4:ec:02:d3:7b:0c:9f:c7:b0:01:82:a1: 60:5e:c0:e3:17:73:eb:73:fc:48:d8:32:66:5c:25: fc:02:6b:74:81:7d:b8:89:24:ad:be:8d:ab:ea:b7: 0a:66:d5:95:87:e6:9d:bf:84:94:65:c7:79:a4:39: 8f:9d:96:82:17:2d:bd:e8:5f:f5:2c:6c:01:49:c8: 50:98:b1:a8:5a:5b:44:d3:b8:ea:ed:64:82:d5:3b: 6a:3d:a6:d5:d5:b0:8f:50:0a:f2:0c:90:60:35:ba: c7:06:c1:ae:77:4f:ce:2a:c1:58:6b:cb:f1:1f:89: 3f:4b:f4:49:92:bc:da:af:9b:ae:48:eb:ae:25:c0: a9:b6:a4:89:f1:36:7e:3b:cb:25:61:46:1e:97:fc: 58:60:cc:ea:2c:e5:c0:75:ec:d8:99:0b:0e:15:b8: a5:88:d7:31:02:6a:dd:d1:ef:1d:d8:84:3f:66:ad: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9B:21:8E:90:23:92:01:6B:CB:05:12:36:01:07:1E:C8:DE:D5:88 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:69:79:e6:62:6a:8e:4f:9f:c6:78:3e:b4:22:d4:9d:86:b5: a4:f2:d8:29:9b:b6:16:a4:92:1b:f7:33:c1:73:ba:5b:67:b7: 09:b2:81:26:61:14:c4:24:40:fc:09:81:36:87:38:6d:c7:dc: 72:ef:26:70:fd:90:5c:d3:ce:f4:84:a1:da:b8:fb:20:a3:f9: 33:5a:3d:fe:b8:48:fb:d3:30:75:12:29:3d:e2:de:c3:2c:6c: ce:40:ea:94:04:03:c6:a2:3a:ad:6b:91:ff:e1:02:4c:2d:4e: 8f:70:5a:7e:a7:b5:80:2d:b4:18:4f:15:b5:ff:d1:14:7d:18: 5b:fb:7e:1a:25:fa:a3:89:57:21:11:01:73:ea:85:d7:6d:72: c9:a7:b2:7e:3d:91:ef:1f:ac:56:25:8e:49:8c:50:91:ac:23: b7:3d:36:62:29:70:bc:41:26:38:9c:bc:af:6a:92:73:ee:45: 61:77:e1:e4:fc:9e:9e:b1:81:75:25:67:31:1b:ed:5a:2a:55: e1:74:4a:f0:8a:da:b5:a1:fc:1a:d1:cb:74:00:83:da:98:6e: a7:06:01:fe:0b:5d:87:d0:d3:c9:9e:fb:02:bc:2c:fb:f6:e5: 2c:dd:0b:b1:c5:32:1f:d9:2b:d9:cb:4a:56:9f:fe:a8:e7:6e: 4a:ab:14:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdCIkhsZcsZdxvDI/3tHb9d2isY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA1MjkwMzUyMzFaFw0yNjA1MzAwNTE4MzFaMDMxMTAvBgNV BAMTKDc1OUIyMThFOTAyMzkyMDE2QkNCMDUxMjM2MDEwNzFFQzhERUQ1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKiVnD0SDYT5YlGL8VzqKLNHY V9t2yynepB36gzbf5xX9ExsONse+C4b3iWVNgSCCgVIM9IduKEthtyvzX6Upmfuz aPD97SK3TuKzhOTsAtN7DJ/HsAGCoWBewOMXc+tz/EjYMmZcJfwCa3SBfbiJJK2+ javqtwpm1ZWH5p2/hJRlx3mkOY+dloIXLb3oX/UsbAFJyFCYsahaW0TTuOrtZILV O2o9ptXVsI9QCvIMkGA1uscGwa53T84qwVhry/EfiT9L9EmSvNqvm65I664lwKm2 pInxNn47yyVhRh6X/FhgzOos5cB17NiZCw4VuKWI1zECat3R7x3YhD9mrZL5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdZshjpAjkgFrywUSNgEHHsje1YgwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGl55mJqjk+f xng+tCLUnYa1pPLYKZu2FqSSG/czwXO6W2e3CbKBJmEUxCRA/AmBNoc4bcfccu8m cP2QXNPO9ISh2rj7IKP5M1o9/rhI+9MwdRIpPeLewyxszkDqlAQDxqI6rWuR/+EC TC1Oj3Bafqe1gC20GE8Vtf/RFH0YW/t+GiX6o4lXIREBc+qF121yyaeyfj2R7x+s ViWOSYxQkawjtz02YilwvEEmOJy8r2qSc+5FYXfh5PyenrGBdSVnMRvtWipV4XRK 8IrataH8GtHLdACD2phupwYB/gtdh9DTyZ77Arws+/blLN0LscUyH9kr2ctKVp/+ qOduSqsUTA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client